feat(nspawn): prepare Forgejo Orion migration #11

Closed
mxm wants to merge 127 commits from bmns-028f-forgejo-orion into main
Owner

Summary

  • prepare villa-app-03 as an inactive first-class Orion nspawn guest for Forgejo
  • preserve CT 116 as the authoritative rollback source until a separately authorized cutover
  • record exact recovery, runner, repository, workflow, checkpoint, acceptance, and rollback gates

Changes

  • add the complete-root Forgejo/PostgreSQL guest contract and Orion placement
  • add 10.233.1.28/30, qgroup 1/108, 32 GiB storage, 2 vCPU, and 2 GiB memory contracts
  • retain CT 116 in inventory while removing its active Clan machine/service binding
  • add focused Nix assertions and an exact BMNS-028F run card
  • allow bounded manual CI qualification through workflow_dispatch

Test Plan

  • nix fmt -- --ci
  • nix flake check
  • git diff --check
  • inactive Orion closure staged and qualified through isolated native restore
  • checkpoint create, verify, restore, verify, and cleanup rehearsal
  • source, recovery hashes, both-router mesh backend, public HTTPS/SSH, and runner fence green
  • live cutover; requires the operator's explicit Run authorization for the committed run card
## Summary - prepare `villa-app-03` as an inactive first-class Orion nspawn guest for Forgejo - preserve CT 116 as the authoritative rollback source until a separately authorized cutover - record exact recovery, runner, repository, workflow, checkpoint, acceptance, and rollback gates ## Changes - add the complete-root Forgejo/PostgreSQL guest contract and Orion placement - add `10.233.1.28/30`, qgroup `1/108`, 32 GiB storage, 2 vCPU, and 2 GiB memory contracts - retain CT 116 in inventory while removing its active Clan machine/service binding - add focused Nix assertions and an exact BMNS-028F run card - allow bounded manual CI qualification through `workflow_dispatch` ## Test Plan - [x] `nix fmt -- --ci` - [x] `nix flake check` - [x] `git diff --check` - [x] inactive Orion closure staged and qualified through isolated native restore - [x] checkpoint create, verify, restore, verify, and cleanup rehearsal - [x] source, recovery hashes, both-router mesh backend, public HTTPS/SSH, and runner fence green - [ ] live cutover; requires the operator's explicit `Run` authorization for the committed run card
mxm added 127 commits 2026-08-14 23:03:52 +00:00
feat(nspawn): prepare Forgejo Orion migration
Some checks failed
CI / flake-check (pull_request) Failing after 19s
f3b8256562
mxm closed this pull request 2026-08-14 23:04:50 +00:00
Some checks failed
CI / flake-check (pull_request) Failing after 19s

Pull request closed

Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
mxm/homelab!11
No description provided.